-
Updated
Dec 8, 2020 - JavaScript
{{ message }}
A static analyzer for Java, C, C++, and Objective-C
To load dependencies withing a gem/app, require_relative should always be preferred to require
We should check for any instance of (send nil? require `{:__dir__ :__FILE__}) and raise an offense.
I can't event think of a single instance where require should be called with an interpolated string tbh
PHP Static Analysis Tool - discover bugs in your code without running it!
A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Golang security checker
Affects PMD Version: 6.30.0-SNAPSHOT
Rule:UseTryWithResources
Description:
Code Sample demonstrating the issue:
https://chunk.io/pmd/fc7db65b2c6a46eca4c9a0c3012482e2/diff/checkstyle/index.html#A360
import jIt's not just a linter that annoys you!
Would be good to automatically add a .gitignore to the output dir when creating it, e.g. with contents
# Automatically created by pytype
*This way people wouldn't need to manually add it to their upper level gitignores. Many tools already do this for their similar dirs, mypy and pytest to name a couple.
This file is enormous. Also, breaking it up will make running tests faster since Gradle can run separate test classes in parallel.
Describe the bug
In the docs found here:
https://bandit.readthedocs.io/en/latest/plugins/index.html#complete-test-plugin-listing
B109 and B111 show a description instead of a plugin name. This looks inconsistent since all the other plugin names are listed. I believe this is a result of a recent change to remove these deprecated plugins.
To Reproduce
Is your feature request related to a problem? Please describe.
In a minified JS file, showing the "matched line" will basically mean the whole file is printed. This is pretty painful to navigate around. And since every match in the file is a new finding, the whole file is printed again and again.
Describe the solution you'd like
Ideally, I would like to only show the matched section (
Static analysis for Angular projects.
--level used: 5In a project that follows DDD, there are usually multiple directories where migration files exist:
database/migrations/*
domains/<domain>/Database/Migrations/*
In these cases it is not possible to configure larastan to scan all the migrations, since the databaseMigrationsPath only accepts a string.
Is there any way to
Code Climate CLI
How can i run findsecbugs rules in spotbugs?
Am i right?
./spotbugs -textui -pluginList /Users/xxx/Downloads/findsecbugs-plugin-1.11.0-SNAPSHOT.jar -home . -low -output ./aaa -progress -train ./bbb -sourcepath ~/Downloads/codez/test/My-Blog/ -debug -noClassOk -progress -auxclasspath ~/Downloads/codez/test/My-Blog/target/ -choosePlugins edu.umd.cs.findbugs.plugins.core
ESLint Config for JavaScript Standard Style
I wrote some of the code to do this in a branch https://github.com/python-security/pyt/compare/class_based_views, but since I'm working on other things and this feature seems cool and important I'm making this issue
Let me know if you would like any help in implementing.
Manage translation and localization with static analysis, for Ruby i18n
Rubberduck version information
Version 2.5.1.5557
OS: Microsoft Windows NT 10.0.14393.0, x64
Host Product: Microsoft Outlook x86
Host Version: 16.0.4266.1001
Host Executable: OUTLOOK.EXE
Description
The event procedures _Itemadd on some collections are marked as "Procedure not used"
To Reproduce
declare
Private WithEvents colCeka As Items
Private WithEvents colDraft
A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)
A static code analyzer for C++, C#, Lua
The official GitHub mirror of https://gitlab.com/pycqa/flake8
Kubernetes object analysis with recommendations for improved reliability and security
Additional ESLint's rules for Node.js
Add a description, image, and links to the static-code-analysis topic page so that developers can more easily learn about it.
To associate your repository with the static-code-analysis topic, visit your repo's landing page and select "manage topics."